Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3230312e3134302e3234382e302f32322d3332203d3e203631363936.roa
File:                     3230312e3134302e3234382e302f32322d3332203d3e203631363936.roa (raw, json)
Hash identifier:          khDa0OBbnESPfCKzHm7BK4NY284vjuPEqrAp7hU+Ob8=
Subject key identifier:   DA:D2:0C:91:38:A5:EB:B8:B2:51:12:07:5E:A8:A6:29:F8:9E:28:66
Certificate issuer:       /CN=5FF71CDDAB4B88F6163D96DC07EF1E5799133F07
Certificate serial:       79A51733B83E5A419E0B19F9C22CAEA9F387748A
Authority key identifier: 5F:F7:1C:DD:AB:4B:88:F6:16:3D:96:DC:07:EF:1E:57:99:13:3F:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FF71CDDAB4B88F6163D96DC07EF1E5799133F07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3230312e3134302e3234382e302f32322d3332203d3e203631363936.roa
Signing time:             Thu 15 Feb 2024 04:50:50 +0000
ROA not before:           Thu 15 Feb 2024 04:45:50 +0000
ROA not after:            Thu 13 Feb 2025 04:50:50 +0000
asID:                     61696
IP address blocks:        201.140.248.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a5:17:33:b8:3e:5a:41:9e:0b:19:f9:c2:2c:ae:a9:f3:87:74:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FF71CDDAB4B88F6163D96DC07EF1E5799133F07
        Validity
            Not Before: Feb 15 04:45:50 2024 GMT
            Not After : Feb 13 04:50:50 2025 GMT
        Subject: CN=DAD20C9138A5EBB8B25112075EA8A629F89E2866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8f:64:67:a4:98:35:71:86:db:6c:75:6b:da:
                    0f:43:9e:90:f4:31:38:62:4b:75:9e:a4:37:99:9a:
                    1f:6e:aa:3e:0e:59:23:94:fb:52:b7:e4:65:79:92:
                    74:6f:c6:ae:a7:e3:b5:24:a1:6b:9f:de:4d:fc:50:
                    7e:ef:18:75:70:fc:da:5b:be:c1:b0:cb:54:06:8e:
                    0f:14:7f:90:c0:1d:65:34:f3:88:b0:fd:86:60:ea:
                    ec:7c:45:af:76:a9:28:df:21:da:50:16:e3:33:f6:
                    05:16:0c:1c:2a:c2:43:ef:3f:3f:52:24:92:f4:47:
                    78:a2:b6:5e:ab:c7:ab:f2:6c:68:b7:b7:ac:df:fe:
                    ba:7d:8f:5e:6a:88:4d:67:16:a7:12:5e:ba:06:a1:
                    b1:5f:57:f0:8c:ca:49:c2:90:d7:97:fa:ea:e6:25:
                    48:35:9c:34:3b:29:d8:a7:02:f8:4d:1d:92:6c:1b:
                    26:56:b8:da:69:40:c8:a6:7a:42:62:8c:57:77:1a:
                    e2:d8:eb:94:aa:63:8e:75:71:78:2e:38:bc:be:5d:
                    a9:52:28:1b:31:32:cd:bd:97:90:3c:5b:24:c8:6a:
                    8e:ad:0f:86:de:3f:d6:b4:61:40:de:50:11:b0:6c:
                    96:b6:0a:a8:e6:e5:26:38:0b:f0:17:bc:26:2c:da:
                    31:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D2:0C:91:38:A5:EB:B8:B2:51:12:07:5E:A8:A6:29:F8:9E:28:66
            X509v3 Authority Key Identifier:
                keyid:5F:F7:1C:DD:AB:4B:88:F6:16:3D:96:DC:07:EF:1E:57:99:13:3F:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/5FF71CDDAB4B88F6163D96DC07EF1E5799133F07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FF71CDDAB4B88F6163D96DC07EF1E5799133F07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3230312e3134302e3234382e302f32322d3332203d3e203631363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:12:43:e6:8c:e1:ac:37:de:ab:2c:a9:01:a7:40:c9:76:93:
         e3:db:2f:22:6d:f8:1a:52:21:6a:e6:c6:22:fa:80:a3:a4:5e:
         d4:34:49:26:db:53:df:ce:5a:6e:e1:6d:e3:69:44:e6:6e:62:
         85:74:6b:b0:9c:02:f0:e6:8d:85:02:7d:4a:1e:dd:70:74:7b:
         62:65:b5:7f:4c:a0:b7:83:c8:dd:28:3b:37:ba:96:67:d4:80:
         7f:27:cc:0b:85:b0:29:c9:1f:85:c5:05:44:46:ba:a0:8e:20:
         1d:ad:7b:b6:c4:c2:dc:13:c8:81:32:da:c7:0d:53:1a:0c:28:
         1a:3c:68:aa:63:cd:f5:ac:70:ef:2f:59:2b:16:81:7c:5a:87:
         bf:a5:79:4f:8d:67:5a:3a:55:c0:f0:4f:2a:d4:d1:c2:86:35:
         c2:3c:8c:4c:d3:ff:72:5b:2c:0c:30:98:70:c8:8a:ea:cc:46:
         ed:e2:fd:e2:df:10:af:14:99:37:69:1e:50:d9:3f:73:4c:25:
         aa:10:f8:40:b8:02:83:b8:c1:86:7d:5d:42:52:f4:ca:da:94:
         f2:40:03:35:4e:7e:87:d0:9d:23:07:80:64:40:bf:7d:4a:c2:
         81:7b:c7:a4:13:a6:6a:c3:40:41:9b:b9:70:a7:c6:9c:f8:a0:
         4e:b0:0b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org